Standup Notes 2019 07 01

Participants (alphabetical): Allie, Conor, Erik, Jen, John, Kushal

Topics and Call-outs

• Keyserver denial of service attack & mitigation in SD-land (Background: https://lists.torproject.org/pipermail/tor-project/2019-June/002377.html )
• .club redirects broken

Quote:

c. GnuPG cannot read refresh keys from keys.openpgp.org (workaround: use the custom patch shipped in Debian experimental, see Debian bug #930665)

• (Conor) Create [email protected] alias

• (Jen) Add UID to existing release key

• (Erik/Kushal) Evaluate capability to modify user data on keys.openpgp.org

• (Jen/...) Updating Tails Workstation client

• (Jen) update securedrop-keyring package with new uid

• update securedrop-release-signing-key hosted on SDO

• research FPF support comms keyring implementation (fetched from keyring?)

• Implementing WKD on FPF servers (securedrop.org & freedom.press)

• Docs updates throughout SD docs for gpg key fetching

• (Erik) Verify that Tails GPG supports WKD

Allie

Yesterday:

• We merged login styling changes (some polish remains to be done)
• Progress towards showing first name/last name

Today:

• Look at open PRs for client

Blockers or Asks: None

Conor

Yesterday:

• CD related work: adding keypair for bot that will push packages to git-lfs repo

Today:

• Contractor on-boarding

Blockers or Asks: None

Erik

Yesterday: (Friday)

• Round of updates to journalist guide
• Hiring & support follow-up

Today:

• Pre-release messaging for 0.14.0
• Support follow-up (now looking at 3 on-sites in the next 2-3 months)
• Cont'd work on docs PR as time allows

Blockers or Asks: None

Jen

Yesterday:

Friday:

• wip towards securedrop core release candidate builds in CI
• Reviewed Python 3 PR and approved
• Learnin' time

Today:

• Run through client reviews from this sprint starting with oldest PR first
• Pick up another ticket, will see what's around when I get there

Blockers or Asks:

• None

John

Yesterday:

• Unwittingly made a good deal of progress on https://github.com/freedomofpress/securedrop-client/issues/369
• Worked on some securedrop core test flakes, to no avail

Today:

• More work on #369
• possible client support

Blockers or Asks:

• None

Kev

Holiday in Canada

Kushal

Today:

• Added tests and marked the PR ready for review https://github.com/freedomofpress/securedrop-client/pull/445
• Reviewed and merged https://github.com/freedomofpress/securedrop/pull/4563
• Started reviewing the Python3 big PR
• meetings Tomorrow:
• Finish off the Python3 PR review

Blockers or Asks:

• None

Mickael

Holiday in Canada